CVE-2020-24227

Published: Nov 23, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfiles.sol to extract the email and password.

Affected (1)

Products: Playgroundsessions: Playground Sessions

Playgroundsessions

1 product

Playground Sessions

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Playgroundsessions Playground Sessions	Up to 2.5.582

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://github.com/nathunandwani/CVE-2020-24227

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/nathunandwani/CVE-2020-24227

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.